CVE-2022-49851

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

riscv: fix reserved memory setup

Currently, RISC-V sets up reserved memory using the "early" copy of the

device tree. As a result, when trying to get a reserved memory region

using of_reserved_mem_lookup(), the pointer to reserved memory regions

is using the early, pre-virtual-memory address which causes a kernel

panic when trying to use the buffer's name:

Unable to handle kernel paging request at virtual address 00000000401c31ac

Oops [#1]

Modules linked in:

CPU: 0 PID: 0 Comm: swapper Not tainted 6.0.0-rc1-00001-g0d9d6953d834 #1

Hardware name: Microchip PolarFire-SoC Icicle Kit (DT)

epc : string+0x4a/0xea

ra : vsnprintf+0x1e4/0x336

epc : ffffffff80335ea0 ra : ffffffff80338936 sp : ffffffff81203be0

gp : ffffffff812e0a98 tp : ffffffff8120de40 t0 : 0000000000000000

t1 : ffffffff81203e28 t2 : 7265736572203a46 s0 : ffffffff81203c20

s1 : ffffffff81203e28 a0 : ffffffff81203d22 a1 : 0000000000000000

a2 : f

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References